3da1c557ec219126a3131dc8ce5c52fa | Triage

Sharing

General

Target

3da1c557ec219126a3131dc8ce5c52fa
Size

775KB
MD5

3da1c557ec219126a3131dc8ce5c52fa
SHA1

beebce35346d611d9cb54f12f7c1531a16810ab9
SHA256

15c7e1aefaa8433f1f88c4bb866e5ff123e0b74a94c3bbf1c1a192f1155985ee
SHA512

156f68d5899334e0ddf55ff075e7cb820a43c2eb6246446fc2fe4b17750dda2c9671e2c13120151ceb21f1038e2185062e3326dbe24b90b04b9590c89e361407
SSDEEP

24576:PKw1VHqTyH8tMR8yzUFF+8q9kDeukZnfD2IJ:S6tHQxFnq6yLZnyi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3da1c557ec219126a3131dc8ce5c52fa

Files

3da1c557ec219126a3131dc8ce5c52fa
.exe windows:4 windows x86 arch:x86

2ff030d345398f46479e8500fb5063c8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteAtom
SetLastError
CloseHandle
FindResourceA
ReleaseMutex
GetEnvironmentVariableA
GetStdHandle
GetModuleHandleA
TlsAlloc
lstrlenW
TlsGetValue
GlobalFree
LoadLibraryExA
CreateFileA
GetExitCodeProcess
GetCurrentThreadId
GlobalUnlock
HeapCreate
GetProcessHeap
CreateMutexA

user32

CallWindowProcA
CheckRadioButton
GetDlgItem
CreateMenu
GetCaretPos
DispatchMessageA
SetFocus
DrawMenuBar
IsWindow
GetDC
FillRect
DrawEdge
CreateWindowExA

ntshrui

GetLocalPathFromNetResourceA
IsPathSharedA
IsPathSharedW
GetNetResourceFromLocalPathA
SetFolderPermissionsForSharing

msasn1

ASN1BERDecEoid

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 765KB - Virtual size: 768KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE